>If someone hasn't suggested it already, post your trusted_* config lines
>>along with the headers for a message that you think hit wrong, and we can
>>probably help you figure out what is going wrong. The first guess
would be
>>that you don't have trusted_networks set quite *right*, even though
you have
>>it set to *something*.
>>
>> Loren
I really didn't want to hijack the other continuing thread on this, but
I still have problems with my trusted_networks.
The only time I really notice this is when I recieve a spam that isn't
marked as such. In the case below, had it not been for the
trusted_networks, this spam would have clearly been marked as such.
In the first example, I'm using fetchmail to drag down messages from a
remote mailbox on another server. It appears to me that fetchmail is
causing this to appear as it is coming from localhost
(localhost.localdomain) and that is why _I think_ it is hitting the
ALL_TRUSTED.
Mail that comes directly into my network (not via fetchmail) I do not
believe ever has the ALL_TRUSTED as shown in the second example.
My trusted nework configs:
# Trusted
clear_trusted_networks
trusted_networks 192.168.1/24
# Internal
clear_internal_networks
internal_networks 192.168.1/24
Headers from a message where ALL_TRUSTED hit:
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost.localdomain [127.0.0.1])
by av.cajuninc.com (Postfix) with ESMTP id 5DBEE24F59E
for <[EMAIL PROTECTED]>; Fri, 9 Dec 2005 18:40:25 -0500 (EST)
Received: from amavis.cajuninc.com ([127.0.0.1])
by localhost (moe.cajuninc.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 24014-04 for <[EMAIL PROTECTED]>;
Fri, 9 Dec 2005 18:40:06 -0500 (EST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by dhcppc1.cajuninc.com (Postfix) with ESMTP
for <[EMAIL PROTECTED]>; Fri, 9 Dec 2005 18:40:06 -0500 (EST)
Delivered-To: [EMAIL PROTECTED]
Received: from mail.lizardhill.com [64.125.72.2]
by localhost with POP3 (fetchmail-6.2.5)
for [EMAIL PROTECTED] (single-drop); Fri, 09 Dec 2005 18:40:06 -0500
(EST)
Received: (qmail 845 invoked by uid 1279); 9 Dec 2005 23:37:07 -0000
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 832 invoked by uid 0); 9 Dec 2005 23:37:06 -0000
Received: from unknown (HELO 207.96.139.179) (unknown)
by unknown with SMTP; 9 Dec 2005 23:37:06 -0000
Message-ID: <[EMAIL PROTECTED]>
From: "PrinceFelton" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Software i use
Date: Sat, 10 Dec 2005 01:32:33 +0300
X-Mailer: QUALCOMM Windows Eudora Version 5.1
MIME-Version: 1.0
Content-Type: text/html;charset=windows-1251;
Content-Transfer-Encoding: 8bit
X-Antivirus: avast! (VPS 0549-4, 2005-12-09), Outbound message
X-Antivirus-Status: Clean
X-Virus-Scanned: amavisd-new at cajuninc.com
X-Spam-Status: No, hits=4.56 tagged_above=-999 required=5
tests=[ALL_TRUSTED=-3.3, BAYES_80=2, DCC_CHECK=2.169,
DIGEST_MULTIPLE=0.098,
FORGED_MUA_EUDORA=0, FORGED_QUALCOMM_TAGS=0.489, HTML_20_30=0.226,
HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.137, MIME_HTML_ONLY=0.177,
RAZOR2_CF_RANGE_51_100=0.056, RAZOR2_CHECK=1.511, URIBL_SBL=0.996]
X-Spam-Level: ****
Status: O
X-UID: 18500
Content-Length: 224
X-Keywords:
Headers from an email that was not brought in via fetchmail:
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost.localdomain [127.0.0.1])
by av.cajuninc.com (Postfix) with ESMTP id 17EE424F59F
for <[EMAIL PROTECTED]>; Fri, 9 Dec 2005 14:15:40 -0500 (EST)
Received: from amavis.cajuninc.com ([127.0.0.1])
by localhost (moe.cajuninc.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 19390-03 for <[EMAIL PROTECTED]>;
Fri, 9 Dec 2005 14:15:23 -0500 (EST)
Received: from ip5452da05.adsl-surfen.hetnet.nl
(ip5452da05.adsl-surfen.hetnet.nl [84.82.218.5])
by dhcppc1.cajuninc.com (Postfix) with SMTP
for <[EMAIL PROTECTED]>; Fri, 9 Dec 2005 14:15:15 -0500 (EST)
Received: from vscan.hotkey.net.au
by ip5452da05.adsl-surfen.hetnet.nl (8.9.3/8.9.3) with ESMTP id
M4C3wskAyHzd
for <[EMAIL PROTECTED]>; Sat, 10 Dec 2005 02:01:22 -0800
Received: from 165.80.5.82
by vscan.hotkey.net.au via HTTP
for <[EMAIL PROTECTED]>; Sat, 10 Dec 2005 02:01:22 -0800
Date: Sat, 10 Dec 2005 02:01:22 -0800
From: Lane Meadows <[EMAIL PROTECTED]>
Reply-To: Lane Meadows <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: *****SPAM***** Worried about not measuring up? real
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: amavisd-new at cajuninc.com
X-Spam-Status: Yes, hits=17.62 tagged_above=-999 required=5
tests=[BAYES_80=2,
FU_GEOCITIES=0.257, FU_UKGEOCITIES=5.697, ML_B_GEOCITIES=8,
SARE_SPEC_XXGEOCITIES2=1.666]
X-Spam-Level: *****************
X-Spam-Flag: YES
X-Spam-Report: Spam detection software, running on the system
"moe.cajuninc.com",
=?iso-8859-1?Q?has=0Aidentified_this_incoming_email_as_possible_spam=2E__?=
=?iso-8859-1?Q?The_original_message=0Ahas_been_attached_to_this_so_you_ca?=
=?iso-8859-1?Q?n_view_it_=28if_it_isn=27t_spam=29_or_label=0Asimilar_futu?=
=?iso-8859-1?Q?re_email=2E__If_you_have_any_questions=2C_see=0Athe_admini?=
=?iso-8859-1?Q?strator_of_that_system_for_details=2E=0A=0AContent_preview?=
=?iso-8859-1?Q?=3A__Advanced_Powermale_Pills_is_absolutely_new_and_safe__?=
=?iso-8859-1?Q?for_your_health_about=2E_It=92s_the_best_way_if_you_want_t?=
=?iso-8859-1?Q?o_make_your__pennies_bigger_and_become_a_long_player_in_se?=
=?iso-8859-1?Q?x_games_add=2E_These_pills__will_make_you_realize_that_the?=
=?iso-8859-1?Q?_saying_=93the_size_doesn=92t_matter=94_is_not__completely?=
=?iso-8859-1?Q?_true_at_all_legal=2E_=5B=2E=2E=2E=5D_=0A=0AContent_analys?=
=?iso-8859-1?Q?is_details=3A___=2817=2E6_points=2C_5=2E0_required=29=0A_p?=
=?iso-8859-1?Q?ts_rule_name______________description=0A----_-------------?=
=?iso-8859-1?Q?---------_------------------------------------------------?=
=?iso-8859-1?Q?--_5=2E7_FU=5FUKGEOCITIES_________URI=3A_FU=5FUKGEOCITIES_?=
=?iso-8859-1?Q?0=2E3_FU=5FGEOCITIES___________URI=3A_FU=5FGEOCITIES_8=2E0?=
=?iso-8859-1?Q?_ML=5FB=5FGEOCITIES_________URI=3A_ML=5FB=5FGEOCITIES_2=2E?=
=?iso-8859-1?Q?0_BAYES=5F80_______________BODY=3A_Bayesian_spam_probabili?=
=?iso-8859-1?Q?ty_is_80_to_95=25____________________________=5Bscore=3A_0?=
=?iso-8859-1?Q?=2E8857=5D_1=2E7_SARE=5FSPEC=5FXXGEOCITIES2_spamsign_point?=
=?iso-8859-1?Q?ing_to_free_webhost_spam_site=0A?=
Status: O
X-UID: 7287
Content-Length: 751
X-Keywords:
--
Life would be so much easier if we could just look at the source code.
19:05:01 up 1 day, 19:05, 4 users, load average: 0.02, 0.08, 0.03
Linux Registered User #241685 http://counter.li.org
